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This paper presents a stability analysis and an application of a recently developed Con- 
trol Allocator for recovery from Pilot Induced Oscillations (CAPIO). When actuators are 
rate-saturated due to either aggressive pilot commands, high gain flight control systems 
or some anomaly in the system, the effective delay in the control loop may increase. This 
effective delay increase manifests itself as a phase shift between the commanded and ac- 
tual system signals and can instigate Pilot induced Oscillations (PIO). CAPIO reduces the 
effective time delay by minimizing the phase shift between the commanded and the actual 
attitude accelerations. We present a stability analysis of CAPIO for a scalar system. In 
addition, we present simulation results for aircraft with cross-coupling which demonstrates 
the potential of CAPIO serving as an effective PIO handler in adverse conditions. 

I. Introduction 

A pilot induced oscillation (PIO) can be described as “sustained or uncontrollable oscillations resulting 
from efforts of the pilot to control the aircraft” 1,2 or “inadvertent, sustained aircraft oscillation which is the 
consequence of an abnormal joint enterprise between the aircraft and the pilot”. 3 The main commonality 
between various definitions is that there is an undesired, sustained oscillation due to a pilot-aircraft coupling. 
There are several possible instigators of PIOs such as rate saturated actuators, high gain pilot/controller, 
system delays and phase lags. The authors previously proposed a Control Allocation technique to recover 
from Pilot Induced Oscillations (CAPIO) 4 due to actuator rate saturation, for which a patent is pending. 
In this paper, a comparison between the conventional controller allocators and CAPIO is given in the case 
of a PIO event when the aircraft has inertial cross coupling. Moreover, a stability analysis is provided for 
systems with CAPIO. 

Actuator rate saturation is a phenomenon that is frequently observed during PIO events and has led 
to several crashes. A comprehensive overview of the effect of rate limiting on PIOs is given by Klyde and 
Mitchell. 5 Figure 1 presents a basic model for a rate limited actuator, 5 where u is the input to the actuator 
and 5 is the actual actuator deflection. Without the rate limit, this dynamics is simply a first order lag, 
which is often used as an approximate model for actuators. Figure 2 5 7 shows time evolutions of input-output 
signals of such a rate saturated actuator, where u c = u represents the pilot command. Gain reduction and 
an increase in effective time delay are two detrimental results of rate saturation, as seen from this figure. 

There are several successful approaches in the literature that address eliminating the effective time 
delay. Differentiate-limit-integrate (DLI) approach 8-12 is one of the approaches that is implemented using a 
“software rate limiter” as shown in figure 3, where the software limiter is placed between the command signal 
and the input signal to the actuator. This method eliminates the effective time delay introduced by the rate 
saturation as seen in figure 4 and hence the onset of a PIO can be avoided. The DLI method proved very 
successful both in simulation and actual flight tests. It has, however, some deficiencies such as introduction 
of a bias and susceptibility to noise. See figure 5. These problems may be handled using different techniques 
such as filtering and resetting/retrimming. 9 11 See also 12 for more improved results. 
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Figure 1. Actuator model with rate saturation. 



Time delay 

Figure 2. Input u and output <5 of a rate saturated actuator. 


There are also other methods for dealing with the effective time delay based on manipulating the input 
signal: Smith and Edwards 13 used a nonlinear adaptive filter to attenuate the pitch stick shaping function 
gain depending on the magnitude and frequency of the pilot input and the rate limits of the elevators. 
This approached was successfully implemented in Space Shuttle Enterprise ALT-5 and no further pitch PIO 
events were reported in the open literature since the 1977 event. 5 Koper 14 developed a phase compensating 
filter which reverses the direction of a rate saturated actuator when the derivatives of the input and the 
output signals have opposite sign and when the absolute value of the error is increasing. Rundqwist and 
Hillgren 15 developed a similar actuator output reversing logic wherein a feedback signal is passed through a 
lowpass filter. This approach also proved to be successful in actual flight tests. Hanke 16 developed another 
phase compensator for a rate limiting element without using any feedback or logic but employing describing 
function 17 relationships. This filter also performed successfully in flight tests. 

To the best of authors’ knowledge, all the previously reported successful implementation results were 
for SISO applications without any redundant actuators. Consider the closed loop flight control structure in 
figure 6, where the pilot is also in the loop. In this structure, the pilot task may be to track an altitude 
reference r, by getting altitude measurement feedback y , and making necessary corrections via a pilot stick 
which gives pitch rate commands u c as a reference to the inner flight controller. The inner controller may 
also be responding to roll and yaw rate commands at the same time. So, the “pilot command” u c can be 
a vector of three elements. The controller then calculates the necessary attitude accelerations v G 5ft 3 and 
then control allocator allocates the available actuators u G 5R m , m > 3, to achieve these desired accelerations 
while possibly satisfying secondary objectives like drag minimization. In this scenario, it is not obvious 
where and how to use the DLI software limiter. An extension of using the DLI method to multi-input 
multi-output (MIMO) applications is given by Hess and Snell, 9 however, the authors had to use “ganged” 
actuators for successful implementation. Ganging of the actuators, on the other hand, prevents the use of 
redundant actuators for secondary objectives like drag minimization or reconfiguration after a failure. In 



Figure 3. Software rate limiter. 
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Figure 4. Input u c and output <5 of a rate saturated actuator with a preceding software rate limiter. 



Figure 5. Bias caused by the differentiate-limit-integrate approach 


addition, ganging becomes more cumbersome as the number of actuators increases . 18 



Figure 6. Overall SISO system structure 


It is noted that Durham and Bordignon 19 extended the direct control allocation scheme to make it 
easier to implement for the case of rate-limited actuators and consequently ended up with a ” moment- 
rate allocation” scheme. Although there is no implementation result showing a PIO preventing example in 
this study, this control allocation scheme has a potential to handle PIOs despite being more complicated 
than CAPIO. Furthermore, the technique 19 needs the calculation of a moment rate set which can introduce 
additional computational intensity. 

The control allocation method CAPIO, previously proposed by the authors , 4 is built upon the previous 
works and is suitable for MIMO applications in the presence of redundant actuators. The main idea behind 
CAPIO is to minimize the phase lag introduced into the system due to rate saturation by minimizing the 
error between the derivatives of desired and actual total control effort vectors as well as minimizing the 
error between them, using constrained optimization techniques. To achieve this goal, for example in a 
SISO case, one needs to minimize the phase lag between the pilot input and the control surface deflection. 
On the other hand, in a MIMO case, where there are multiple inputs and outputs, one needs to pinpoint 
where exactly the phase lag is being introduced to the system. For example, in a scenario where the flight 
control system produces the desired rate accelerations and a control allocator distributes these commands to 
redundant actuators using some predefined optimization routine, it makes more sense to minimize the phase 
lag between the desired and achieved accelerations than concentrating on individual actuator signals. It is 
noted that merely having a control allocation scheme that takes into account the rate limits of the actuators 
as constraints can not prevent phase shift between the desired and achieved accelerations when saturation 
is unavoidable, and thus may not be able to handle a PIO situation. It was shown 4 in simulation studies, 
where PIOs were present with conventional control allocation techniques and for high gain pilot models, that 
the onset of these PIOs could be prevented using CAPIO. 

In this paper, we first present previously unpublished results where the aircraft is assumed to have inertial 
cross-coupling. Cross coupling between the lateral and longitudinal equations of aircraft becomes dominant 
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in cases where the weight is concentrated along the fuselage as the aircraft’s wings became thinner and 
shorter, causing a shift of weight. 20 The similar effect can also be observed in damaged aircraft where the 
weight shift may occur, for example, as a result of a more than 25% wing loss. 21 In the event of cross 
coupling, a PIO becomes more dangerous since an onset of a PIO in one axis can effect other axes resulting 
in a catastrophic failure. To the best of authors’ knowledge, no PIO prevention technique were tested for 
these cases. It is shown in this paper that CAPIO has the potential to help the aircraft recover from PIOs in 
the presence of cross-coupling. Moreover, we show that under reasonable assumptions, a scalar closed loop 
system that is stable neglecting the rate limiting elements remains stable in the presence of rate limiting 
elements if CAPIO is used as the control allocator. The results can be extended for MIMO systems. 

The organization of this paper is as follows. In Section II, flight control of an aircraft with inertial 
cross coupling is presented. A PIO event is created using a high gain pilot model and conventional control 
allocators and CAPIO are compared in terms of handling the PIO situation. In Section III, the stability 
analysis is given. Finally, in Section IV, a summary is given. 


II. Flight Control of an Aircraft with Inertial Cross-coupling 


To show the advantages of CAPIO, a flight control example using a simplified 22 ADMIRE model 23,24 is 
used with some modifications to simulate inertial cross coupling. This model includes redundant actuators 
which makes the DLI method hard to apply if one does not want to gang the actuators. 

The linearized aircraft model at Mach 0.22, altitude 3000m is given by 


x = [a 
y = Cx 

U = [u c 


P P q r] T -x lin, 
= \p q r] T — 2/ii n , 

&re Ae A*] Ain 5 

^re ^le ^r] ^lin 


X 


A 

B x 


X 

6 


0 

-B S 


5 



(1) 


where <a, /?, p, q and r are the angle of attack, sideslip angle, roll rate, pitch rate and yaw rate, respectively. 
S and u represent the actual and the commanded control surface deflections, respectively. Control surfaces 
are canard wings, right and left elevons and the rudder. (.)n n refers to values at the operating points where 
the linearization was performed. The actuators have the following position and rate limits 


Sc e [-55, 25] x 5 re , 6 le , 8 r £ [-30, 30] x ^ 

Sc,S re ,5 le ,5 r £ [—70,70] x (2) 


and have first order dynamics with a time constant of 0.05 seconds. It is noted that the position limits 
given are the same as the ones given by Harkegard 22 but the rate limits are assumed to illustrate CAPIO 
properties. 

To make this model suitable for control allocation implementation, the actuator dynamics are neglected 
and the control surfaces are viewed as pure moment generators and their influence on a and (3 is neglected. It 
is noted that the actuators dynamics are present during the simulations, i.e. they are neglected only during 
the control allocation algorithm derivation. These assumptions lead to the following approximate model 

x = Ax + B u u = Ax + B v v, 

v = Bu , (3) 

where 


B u = B V B , B v 
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The virtual (total) control effort, u, consists of the angular accelerations in roll, pitch and yaw. To simulate 
the effects of inertial cross-coupling, we modify the A matrix so that a change in pitch angular velocity 
creates a moment in roll and yaw axes: 
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In this flight control example the pilot task is to track a given pitch angle reference, 0^, using a pitch 
rate, stick. In addition, roll rate, p, and the yaw rate, r, are to be controlled independently to track their 
references pd and r^. The overall system structure is given in figure 7. 
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Figure T. Overall MIMO system structure 


The inner controller is a dynamic inversion controller which uses qd , Pd and as references and produces 
the necessary attitude accelerations, v G 5ft 3 , to track these references. Dynamic inversion control laws, v, 
make the closed loop dynamics follow a desired reference model 

Vm = ^raj/ra T ^mXm (5) 

where p m — \p m q m r m ] T represents the desired output and r m ==■ \pd qd t d] T is the reference input. In 
this example, A m = —2 x I ^ X 3 and B m = 2 x / 3 X 3 - Reference model tracking can be achieved by inverting 
the dynamics 18 as 

v = (CB v )~ 1 [A m y + B m r m -CAx\. (6) 

The control allocator distributes this total control effort, u, to individual control surfaces via the actuator 

commands, u G 5ft 4 . The control surfaces then produces actual attitude accelerations, Bu , where B is the 
control input matrix. The pilot is modeled as a pure gain for simplicity. 

II. A. Flight control with conventional control allocation 

The conventional control allocation used in this example minimizes the following objective function 

J=\\Bu-v\\l + e\\u\\l (7) 
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subject to max(u m i n T + Uk-i,u m i n ) < u < min (u max T + Uk-i, u max )^ where T is the sampling interval. 
It is noted that norms, instead of square-norms, can be used in the objective function. Note that (7) is in 
the form of a typical objective function used in conventional control allocators, 18 where the main objective 
is to minimize the error between the desired and the actual total control efforts. As e — » 0, minimizing (7) 
becomes equivalent to achieving the main objective explained above and picking the solution that gives the 
minimum control surface deflection, among different solutions. In this example e = 10 -5 . 

Figure 8 presents the simulation result with the conventional control allocation where the pilot receives 
a step pitch angle reference at t = 3 seconds and the inner controller receives a pulse yaw rate reference at 
t = 0.5 seconds and a zero roll rate reference at all times. The pilot is aggressive and has a gain of 4.11. 
Because of this high gain, the aircraft goes into a divergent PIO in the pitch axis. In addition, inertial 
cross coupling causes dangerous oscillations in the roll axis, which finally diverges. Yaw axis also becomes 
unstable. Canard wings and the ailerons saturate both in position and the rate. The results of saturation can 
best be observed as a phase shift between the desired pitch acceleration V 2 and the actual pitch acceleration 
created by the control surfaces Bu ^ . This phase shift, or the effective time delay, is something that is almost 
always observed in PIO events due to actuator saturation. 



0 5 10 15 0 5 10 15 



Figure 8. Pitch and roll angles 0 and 0, aircraft states x, on the left. Desired (commanded) and actual attitude 
accelerations v and Bu, and the control surface deflections <5, on the right, when a conventional control allocator is used. 


II. B. Flight control with CAPIO 

To recover from a PIO event, CAPIO forces the virtual (total) control effort v, to be in phase with the actual 
control effort Bu produced by the actuators. To achieve this, a derivative error term is added to objective 
function (7) to obtain the following CAPIO objective function 

J = \\Bu-v\\l + \\W d (Bu-v)\\l + e\\u\\l (8) 

where Wd G R 3xS represents a weighting matrix on the derivative term. The cost function J is minimized 
with respect to u, with u = (u — u~)/T , where u~ denotes the value of u at the previous sampling instant. 
It is noted that with this modified objective function, the control allocator is trying to realize v as well as 
v. Very high values of Wd make the signals, v and Bu , have approximately the same derivative at all times, 
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which eliminates the phase lag completely but causes a bias as shown in figure 5. On the other hand, very 
small values of Wd may not be sufficient for the control allocator to be any different than the conventional 
one and thus does not prevent PIOs. Therefore, the designer needs to decide on suitable values of Wd that 
minimize the phase lag and at the same time prevents a bias. As an alternative, the designer can choose to 
“activate” Wd, he. set it to a constant matrix, only when it is needed, and keep it a 0 matrix at all other 
times. The latter approach is taken in this paper, assuming that there exists a PIO detection algorithm on 
board. Wd can also be utilized for axis prioritization. 

The objective function (8) needs to be transformed into a form that can be minimized numerically. To 
achieve this goal, the derivatives in the objective function are approximated as u = (u — u~)/T. After some 
algebra, (8) can be rewritten as 


j = u T ( B t T 2 B + B t RB + ehx 4 ) U 

+2 [~v t T 2 B - u~ T B t RB - v T TRB^j u 
+v t T 2 v + u~ T B T RBu~ + 2u~ T B t RTv 

+v t T 2 Rv (9) 


subject to max(u min T + u~,u min ) <u< mm(ii max T + u~,u max ), where R = W d T W d . 

Figure 9 presents the simulation result when CAPIO is used as the control allocator. All the settings 
including the pilot gain are the same as in the previous example with the conventional control allocation. 
Since CAPIO prevents the effective time delay introduction, the aircraft now recovers from the PIO and no 
dangerous oscillation or divergence is observed in any axis. 
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Figure 9. Pitch angle 0 and aircraft states x , on the left. Desired (commanded) and actual attitude accelerations v 
and Bu, and the control surface deflections (5, on the right, when CAPIO is used. 


To show the difference that CAPIO makes in control effort realization, the pitch axis accelerations are 
presented again in figure 10 for both cases. It is noted as as soon as the PIO detection signal is obtained, 
CAPIO forces the control surfaces to produce accelerations “in phase” with the commanded accelerations, 
eliminating the time delay due to phase shift. When the aircraft recovers from PIO, control surfaces arrange 
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themselves to track the commanded acceleration. The result is recovery from the PIO without any bias 
formation. 




Figure 10. commanded and achieved pitch accelerations, Bu^ and in the case of a conventional control allocator 
(top) and CAPIO (bottom). 


The constrained optimization of the cost (9) is a low dimensional quadratic programming problem 
with linear inequality constraints. This problem depends on a vector of parameters, specifically, on p = 
[u~ v v]. Note that the parameters enter linear in the cost and in the constraints and, hence, such a 
quadratic programming problem can be solved explicitly using off-line multi-parametric QP solvers. The 
solution is known to be a piecewise affine continuous function of the parameter vector and have the following 
form, u = fip + gi, if Fi + Gi < 0, i = 1, ..., N r where N r is the finite number of polyhedral regions and each 
region is associated with its set of linear inequality constraints and its affine map. Such an explicit solution 
is computed off-line and can be deployed on-line in the aircraft software using a set of simple if-then-else 
rules, additions, multiplications and comparisons. The need to embed a quadratic programming solver to 
perform constrained optimization of the cost (9) within aircraft software can thus be avoided altogether. A 
cross-section of the explicit solution polyhedral regions is illustrated in figure 11; the explicit solution has 
N r = 223 regions. 


Polyhedral partition - 223 regions 
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Figure 11. Cross-section of regions of explicit solution by pitch acceleration - pitch acceleration rate plane. 
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III. Stability analysis 


To simplify the stability analysis, we assume a closed loop system where the virtual control input v and 
real control input u are scalars. Furthermore, we assume that the reference input is zero. The resulting 
system structure is presented in figure 12. Consider a plant dynamics represented in state space form and a 
stabilizing state feedback controller: 


x = Ax + Bu 

v = — Kx, (10) 

where x G 5R n , A E 5R nxn , B E 5R n , v is a scalar and K is such that (A — BK ) has only negative eigenvalues. 
Note that plant is not assumed to be open loop stable. 

We assume that Wd is large enough so that CAPIO forces the commanded control input behave as in 
the following manner: 

u = sign (v)l if |h| > l 
ii = v otherwise, 

where / is the actuator rate limit. It is noted that the second equation in (11) is due to CAPIO forcing the 
two signals to have the same derivative, i.e. u = v. According to the first equation in (11), u is trying to 
follow v as much as possible when actuators are saturated. As soon as the saturation ends, u follows v in 
a manner that their derivatives become equal. This behavior prevents wind up and the introduction of an 
effective time delay. When Wd is switched off after the recovery, CAPIO forces u to follow the commanded 
control input v , hence prevents bias formation. 



Figure 12. Closed loop system with CAPIO 


It is noted that the system (10)-(11) is a SISO linear system with states (x,u) and saturation at the 
input v. Its stability may be analyzed using various techniques such as Lyapunov or describing functions, or 
circle criterion. 

For stability analysis we assume that there is a PIO event at t = to and thus the system is experiencing 
a sustained oscillation. The commanded control input v is also in a sustained oscillation mode and causing 
the actuators rate-saturate. In other words, v is oscillating past ±1. Figure 13 illustrates the oscillation of 
v in a region containing the rate saturation limits d=Z. 


<5 


H- 


v 


Figure 13. Oscillation of v past zLl. 


There is no difference between the conventional control allocators and CAPIO when \v\ > /. Both forces 
the actual control input u follow the commanded control input v as much as possible. However, once |h| < /, 
CAPIO stabilizes the system for t > t c . To show this, consider the closed loop system behavior in the 
unsaturated region by employing the second equation in (11) in the plant dynamics (10). It is noted that 
u = v + d for a constant d = u{t c ) — v(t c ) and 

x = Ax + B (v + d) 
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( 12 ) 


= Ax + B (—Kx + d) 
= (A- BK ) x + Bd. 


Defining M = A — BK , the solution to (12) can be given as 


x{t) = e M{t ~ to) 

(x(to) + M~ 1 Bd) — M~ l Bd 

(13) 

Differentiating (13), we obtain 



x(t) = e M(t - io > ( Mx(t 0 ) + Bd) . 

(14) 

Therefore, if |u(t)| < l for t > t c for some t c , we have 


lim x(t) 
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t — XX) 

= 0, 


lim v(t) 

t — >oo 

= lim — Kx(t ) = 0. 

t— XX) 

(15) 


Hence, x(t) tends to — M~ x Bd, whenever \v\ < l. It is noted that —M~ x Bd corresponds to a steady state 
error or a bias, which appears until the derivative term is switched off. Once the system recovers from PIO 
and the derivative term is switched off, CAPIO forces u to follow v and the steady state error is eliminated. 
This behavior can be observed in figures 9 and 10. 

To eliminate the assumption that the system is already in a PIO, we next use the circle criterion 25 to 
investigate the stability of the overall closed loop system with CAPIO as the control allocator. Taking the 
derivative of (10) and defining x = x, u = u and v = h, we obtain 

x = Ax + Bu 
v = —Kx. 

Using the same definitions, we can rewrite (11) as 

u = sign (v)l if \v\ > l 
u = v otherwise. 

Defining u = —u and v = —v, we can represent (16) and (IT) as in figure 14. 


(16) 

(17) 


G(s) 


i 1 



Figure 14. Closed loop system with CAPIO, reconfigured. 


To investigate the stability properties of the closed loop system given in figure 14, without assuming 
that the system is already experiencing a PIO, we need to know the loop transfer function G(s). We will 
use the pitch angle control system example that were given in our earlier paper 4 where we introduced the 
CAPIO without investigating the closed loop stability. We assume a short period dynamics for the plant 
model which is given as 


1.39(8 + 0.306) 

^ “ s 3 + 0.805s 2 + 1.325s' 


( 18 ) 
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We also assume that the pilot (controller) is a pure gain which has a value of 1.65. 
transfer function is obtained as 


2.293(8 + 0.306) 

~~ s 3 + 0.805s 2 + 1.325s' 


Therefore, the loop 
(19) 


CAPIO nonlinearity belongs to the sector [0, 1] (see reference 25 for the circle criterion and sector defini- 
tion) but G(s) is not Hurwitz. Hence, we can not give an absolute stability result using the circle criterion. 
Rather, we will give an absolute stability result with a finite domain. Figure 15 shows that CAPIO is in the 
sector [a 1] for v G [—l/a l /a]. According to circle criterion, the closed loop system is absolutely stable if 
the transfer function 


Z(s) = 


1 + G(wj) 


1 + aG(wj) 

is strictly positive real. Z(s) is strictly positive real if it is Hurwitz and 

1 + G(wj) 


Re 


1 


*G(wj) \ 


> 0, \/w G (—oo, oo). 


( 20 ) 


( 21 ) 


These two requirements are satisfied if the Nyquist plot of G(s) a) does not enters the disk D(a , 1), which 
is defined as the closed disk in the complex plane whose diameter is the line segment connecting the points 
— (1/a) + 0 j and —1 + 0 j, and b) encircles it m times in the counterclockwise direction, where m is the 
number of unstable poles of G(s ). 25 G(s) given in (19) has no unstable roots, therefore m = 0. Also, it can 
be found analytically that (21) is satisfied for a > 0.135. Indeed, figure 16 shows that the Nyquist plot of 
G(s) is not touching the circle .0(0.135, 1). 

To summarize, circle criteria shows that as long as the commended control signal rate v does not exceed 
1/ 0.135 = 7.4/, the origin of the closed loop system, x = v = 0, is absolutely stable, i.e. globally, uniformly 
asymptotically stable. 


IV. Summary 

In this paper, it was presented by simulations that the recently proposed control allocation scheme 
CAPIO prevents the catastrophic failures due to a PIO event in an inertially cross-coupled aircraft. By 
helping the aircraft recover from a PIO quickly, CAPIO stabilizes the system. Once the aircraft recovers 
from the PIO, CAPIO continues to behave like a conventional control allocator. CAPIO achieves this by 
its dual-behaviour: It minimizes both the errors and the derivatives of the errors between the commanded 
and achieved accelerations. By minimizing the derivative errors, it prevents effective delay introduction and 
by minimizing the errors themselves, it helps realizing the commanded accelerations. It was shown that 
CAPIO works effectively in an inertially cross-coupled MIMO system unlike the previously presented control 
allocators. The effects of the CAPIO on the closed loop stability was also investigated and it was shown 
that under reasonable assumptions CAPIO stabilizes a rate saturated system that is nominally, i.e. without 
a saturation limit, stable. 



Figure 15. Sector for CAPIO nonlinearity 
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Nyquist Diagram 



Real Axis 


Figure 16. Circle criteria satisfied by G(s ) 
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